Danvikshem (Stiftelsen Danviks Hospital)
October 13, 2026
•[ ransomware, healthcare ]
Danvikshem (Stiftelsen Danviks Hospital) was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-10-13. Sector: Healthcare. Country: Sweden. A Swedish foundation that operates elder-care services, including residential care at Danvikshem in Nacka
Briab Group AB
October 13, 2026
•[ ransomware, manufacturing, hack ]
Briab Group AB was listed as a victim on the leak site of the Wallstreet ransomware group; the attack is estimated to have taken place on 2026-10-13. Country: Sweden. [AI generated] N/A
I don't have reliable, verified information about a specific company called "Briab Group AB." Rather than provide potentially fabricated details about its operations, industry specifics, or founding information, I'm indicating this as unknown to avoid generating inaccurate threat intelligence. If you have source material or additional context about this company, please share it and I can help analyze it.
Ecuador police headquarters
October 12, 2026
•[ ransomware, government ]
Ecuador police headquarters was listed as a victim on the leak site of the HYFLOCK ransomware group; the attack is estimated to have taken place on 2026-10-12. Sector: Government & Defense. Country: Ecuador. Website: policia.gob.ec. The Command of the National Police of Ecuador (Comandancia General de la Polica Nacional) is the country's top-level police administrative and command center. Heres a breakdown of the key details: Basic Info & Location Headquarters Address: Av. Ro Amazonas N36-152, Quito 170135, Ecuador (located on the main avenue, Amazonas Avenue, in the capital city, Quito). Supervising Body: Directly under the Ministry of Interior of Ecuador, responsible for nationwide internal security and public order. Official Website: Polica Nacional del Ecuador Core Organization & Department Structure Inside the General Command, there are multiple national-level core police and criminal investigation departments: 1. Top Command Layer (Mando Institucional): Led by the General Commander, with Deputy General Commander, Chief Inspector General, and directors in charge of public security, education, finances, and other areas. 2. Criminal Investigations Department: This is the headquarters' main operational unit, responsible for investigating major crimes, organized crimes, and cross-border crimes nationwide. 3. INTERPOL Quito National Central Bureau (NCB Quito): Located within the Criminal Investigations Department at the HQ, it provides 24/7 global intelligence connectivity, real-time access to INTERPOL databases, and leads nationwide cross-border wanted cases and law enforcement.
Estrategias BigMat S.L.U.
October 14, 2026
•[ ransomware, retail, financial ]
Estrategias BigMat S.L.U. was listed as a victim on the leak site of the aurora ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Retail & E-Commerce. Country: Spain. Website: Estrategias BigMat S.L.U.. [distribution] Estrategias BigMat S.L.U. the Spanish master franchisee of BigMat International, a French cooperative and one of Europe's largest building materials distribution networks.
624 SEPA payroll XML files (20222025) every monthly salary payment for 300500 employees across 15+ entities, with full names, DNI/NIE numbers, IBANs, and exact euro amounts.
20 SILTRA Social Security databases the complete filing history for every subsidiary's workforce, containing nmeros de afiliacin, contribution bases, and employment records.
2,690 customer loyalty cards with DNI/NIF identifiers the entire customer-identity database.
888 Modelo 347 tax notifications annual declarations to the Agencia Tributaria naming customers and suppliers with their DNI and transaction amounts.
Complete financial records 5 years of accounting journals, bank reconciliations, insurance policies, loan agreements, and invoices.
Occupational health data (PRL) for 12+ subsidiaries workplace injury reports, medical certificates, and risk assessments.
Joliet Public Schools District 86
October 14, 2026
•[ ransomware, education ]
Joliet Public Schools District 86 was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Education. Country: United States of America. Website: www.joliet86.org.
FOODMatch
October 14, 2026
•[ ransomware, retail ]
FOODMatch was listed as a victim on the leak site of the akira ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Agriculture and Food Production. FOODMatch DIVINA is a producer and importer of Mediterranean specialty foods, offering a wide
range of products including olives, antipasti, spreads, sauces, and condiments. The company fo
cuses on responsibly and traditionally crafted foods that enhance community and quality of life
.
We will upload 55gb of corporate data soon. Detailed employee information (passports, DLs, SSNs
, complete forms), client information, contracts and agreements, payment details, NDA, etc.
Amity University Dubai
September 17, 2026
•[ ransomware, education ]
Amity University Dubai was listed as a victim on the leak site of the blacknevas ransomware group; the attack is estimated to have taken place on 2026-09-17. Sector: Education. Country: United Arab Emirates. 1. Personal data of students and staffFull name, date of birth, address, telephone numbers, e-mailPhotographs; passport, ID, or national identity document numbers2. Academic recordsDisciplinary records and remarksInformation on expulsion or academic leaves of absenceData on scholarships and academic achievements3. Financial informationBank account detailsBank card detailsTuition payment historyInformation on student loans and outstanding debtsData on grants and scholarships4. Research and commercial dataUnpublished research papers and studiesIntellectual propertyConfidential data of partners and sponsorsGrant and contract data5. Data on parents/guardiansContact informationFinancial details
camden-living
October 15, 2026
•[ ransomware, retail ]
camden-living was listed as a victim on the leak site of the iah6477 ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Hospitality. Country: United Kingdom of Great Britain and Northern Ireland. [AI generated] Camden Living, operating through Camden Property Trust, is a United States-based real estate company specializing in the development, ownership, management, and leasing of multifamily residential apartment communities. It operates within the real estate and property management industry, serving residents across major metropolitan markets in the U.S., particularly in the Sun Belt region, including Texas, Florida, and other southern and western states.
Enchanted Fine Jewellery
October 15, 2026
•[ ransomware, retail ]
Enchanted Fine Jewellery was listed as a victim on the leak site of the Vexy Ransomware ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Retail & E-Commerce. Country: India. Website: enchantedfinejewellery.in. enchantedfinejewellery.in
Brame Telecom
October 15, 2026
•[ ransomware, technology ]
Brame Telecom was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Technology. Country: Brazil. Website: www.brametelecom.com.
Company #73
October 15, 2026
•[ ransomware, technology, manufacturing ]
Company #73 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-15. Semiconductor manufacturing California, USA | [PENDING EXPOSURE]
Segres Systec
October 15, 2026
•[ ransomware, technology ]
Segres Systec was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Technology. Country: Spain. Website: www.segres.com.
Telcoe Federal Credit Union
October 15, 2026
•[ ransomware, finance ]
Telcoe Federal Credit Union was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Financial Services. Country: United States of America. Website: www.telcoe.com.
nowaszkola.com
October 15, 2026
•[ ransomware, education ]
nowaszkola.com was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-15. Sector: Education. Country: Poland. Website: nowaszkola.com. /
CureMetrix, Inc.
September 21, 2026
•[ ransomware, healthcare, technology ]
CureMetrix, Inc. was listed as a victim on the leak site of the THE SEVEN DEADLY SINS ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Healthcare. Country: United States of America. Website: curemetrix.com.
Via Credit Union
October 16, 2026
•[ ransomware, finance ]
Via Credit Union was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Financial Services. Country: United States of America. Website: www.viacu.org.
Campbell Rhea
October 14, 2026
•[ ransomware, manufacturing, education ]
Campbell Rhea was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Country: United States of America. Website: campbellrhea.com. campbellrhea.com Campbell Rhea US manufacturer of laboratory and educational casework legal entity Institutional Casework, Inc. (ICI) with roots to 1951 in Paris, TN. The brand survived a 2005 tornado that destroyed its former parent Mohon International, was relaunched by local investors in 2006 (CEO Jim Arthurs ever since), and acquired Jamestown Metal Products (NY) plus a steel plant in Union City, TN 650,000 sq ft of manufacturing total. Products: wood/steel/stainless lab casework, ISOLATOR fume hoods, countertops, athletic lockers (Olympian), Patriot tables certified SEFA-8, FSC, AIA CES. Revenue $32.1M (2025) per FDMC 300, down from a $63.5M COVID-era peak (2022); ~250 employees, 35+ US dealers, projects at Penn State, UC Davis, Vanderbilt, Case Western, U of Missouri.
Harness Inc.
October 16, 2026
•[ ransomware, technology ]
Harness Inc. was listed as a victim on the leak site of the THE SEVEN DEADLY SINS ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Technology. Country: United States of America. Website: harness.io. Enterprise continuous delivery platform; entire Salesforce org with global prospect and customer pipeline.
JJS Justice
October 14, 2026
•[ ransomware, government ]
JJS Justice was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-14. Sector: Government & Defense. Country: United Kingdom of Great Britain and Northern Ireland. Website: jjsjustice.com. jjsjustice.com JJS Justice (Janet, Janet & Suggs, LLC) is a national plaintiff-side firm based in Baltimore/Pikesville, MD, founded 1996 (practice since 1978) specializing in birth injuries/CP, medical malpractice, sexual abuse (clergy, USC/Johns Hopkins), mass torts, and whistleblower cases. Record: $3B+ in verdicts and settlements over 40 years, including the largest US sexual-abuse settlement ($852M vs. USC/Dr. Tyndall, 2021), $190M vs. Johns Hopkins, $225M NJ v. ExxonMobil, and multiple record birth-injury verdicts. Led since Sept 2025 by Andrew S. Janet after founder Howard A. Janet died at 70; core team includes Kenneth M. Suggs (ex-ATLA president) and Dr. Giles Manley (OBGYN turned lawyer). Chambers USA Band 2 (MD plaintiffs), Best Lawyers "Lawyer of the Year" 2025, Super Lawyers, Lawdragon 500, AV Preeminent, ABOTA. Contingency model (no fee unless they win), 10+ states + DC, ~17 lawyers, ~60 staff.
Cradlewise Inc.
October 16, 2026
•[ ransomware, technology, retail ]
Cradlewise Inc. was listed as a victim on the leak site of the THE SEVEN DEADLY SINS ransomware group; the attack is estimated to have taken place on 2026-10-16. Sector: Technology. Country: United States of America. Website: cradlewise.com. VC-backed smart crib manufacturer; ~$14M/yr DTC revenue plus Nurture subscription layer.